fix(deps): combine open Renovate updates

[prisis]

Combines the open Renovate PRs into one branch:

• fix(deps): update minor updates (minor) #1190 minor updates
• fix(deps): update html-eslint monorepo to v0.66.1 - autoclosed #1189 html-eslint 0.66.1
• fix(deps): update dependency react to v19.3.0 - autoclosed #1188 react 19.3.0
• fix(deps): update secretlint monorepo to v13.0.7 - autoclosed #1183 secretlint 13.0.7
• fix(deps): update dependency chrono-node@<2.2.4 to >=2.10.2 #1182 chrono-node >=2.10.2

Lockfile regenerated; pnpm audit --audit-level=moderate → exit 0; tests pass.

Summary by CodeRabbit

• Chores
  • Updated underlying components and security-related version selections as part of routine maintenance.
  • No changes to the app’s visible features or behavior are included in this update.

[github-actions]

Thank you for following the naming conventions! 🙏

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​html-eslint/​parser@​0.66.1
	react@​19.2.8 ⏵ 19.3.0	+1		+1
	globals@​17.13.0
	@​html-eslint/​eslint-plugin@​0.66.1
	@​secretlint/​secretlint-rule-preset-recommend@​13.0.6 ⏵ 13.0.7				+2
	shell-quote@​1.11.0 ⏵ 1.12.0	+1
	secretlint@​13.0.6 ⏵ 13.0.7				+1
	@​eslint-react/​eslint-plugin@​5.22.1 ⏵ 5.23.5	+1			+1

View full report

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: a5a33ad3-3676-45d6-836d-d4b3e5ec1e52

📥 Commits

Reviewing files that changed from the base of the PR and between f386962 and 849d973.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• pnpm-workspace.yaml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The workspace dependency catalog and override declarations in pnpm-workspace.yaml now specify updated package versions and ranges.

Changes

Workspace dependency updates

Layer / File(s)	Summary
Catalog version updates pnpm-workspace.yaml	Updates catalog versions for Secretlint, lint-staged, React, ESLint-related packages, HTML ESLint packages, globals, and shell-quote.
Override target updates pnpm-workspace.yaml	Raises override targets for Axios, Undici, chrono-node, fast-uri, ip-address, shell-quote, SVGO, and tinypool.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 849d9

The updated dependency declarations are reflected in the lockfile, and no actionable merge-blocking risk is established. Run the project's normal frozen-install checks.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: combining open Renovate dependency updates into one pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}